CVEブラウザに戻る

CVE-2018-14332

MEDIUM

5.5

CVSS Severity Score

EPSS Score0.1060%

EPSS Percentile11.46th

Published2018年7月19日

Last Modified2024年11月21日

Vulnerability Description

An issue was discovered in Clementine Music Player 1.3.1. Clementine.exe is vulnerable to a user mode write access violation due to a NULL pointer dereference in the Init call in the MoodbarPipeline::NewPadCallback function in moodbar/moodbarpipeline.cpp. The vulnerability is triggered when the user opens a malformed mp3 file.

Affected Platforms (CPE)

📦

Clementine Player

Clementine

= 1.3.1

References & Advisories

🔗 http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00038.html

🔗 http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00064.html

🔗 https://github.com/MostafaSoliman/Security-Advisories/blob/master/CVE-2018-14332

🔗 https://github.com/clementine-player/Clementine/blob/e5ab3e786f9adde12cec3cc90cfe8c1cc6b06320/src/moodbar/moodbarpipeline.cpp#L155

🔗 https://github.com/clementine-player/Clementine/issues/6078

🔗 http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00038.html

🔗 http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00064.html

🔗 https://github.com/MostafaSoliman/Security-Advisories/blob/master/CVE-2018-14332

関連する脆弱性情報

CVE-2021-408267.8

Clementine Music Player through 1.3.1 is vulnerable to a User Mode Write Access Violation, affecting the MP3 file parsing function...

CVE-2021-408277.8

Clementine Music Player through 1.3.1 (when a GLib 2.0.0 DLL is used) is vulnerable to a Read Access Violation on Block Data Move,...

CVE-2018-1904710.0

mPDF through 7.1.6, if deployed as a web application that accepts arbitrary HTML, allows SSRF, as demonstrated by a '<img src="htt...

CVE-2018-261110.0

Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: Core Service...